Which certificate format does a Cisco WSA need when HTTPS proxy is configured?
Click on the arrows to vote for the correct answer
A. B. C. D.C.
https://community.cisco.com/t5/security-documents/wsa-training-series-how-to-configure-the-https-proxy-on-the/ta-p/3148673When configuring HTTPS proxy on a Cisco Web Security Appliance (WSA), the appliance needs a certificate to establish a secure connection with clients and servers. The certificate format required by the Cisco WSA depends on the specific use case and configuration.
Typically, when configuring HTTPS proxy on a Cisco WSA, the appliance requires a certificate in the Privacy-Enhanced Mail (PEM) format. PEM is a base64-encoded format for encoding keys, certificates, and other cryptographic objects, and it is widely used for secure communication over the internet. PEM certificates are commonly used in web servers, including the Cisco WSA, as they can be easily read and manipulated by web server software.
PEM certificates are typically stored in text files with extensions like .pem, .crt, .cer, or .key. PEM certificates can contain one or more certificates or private keys, and they are usually used in conjunction with a Certificate Authority (CA) to establish trust between clients and servers.
The other certificate formats listed in the answers are also commonly used in web security and cryptography:
DER (Distinguished Encoding Rules) is a binary format for encoding certificates and keys. DER certificates have a .der or .cer file extension and are typically used in Java-based applications and devices.
CER (Certificate) is a binary or base64-encoded format for encoding certificates. CER certificates have a .cer or .crt file extension and are commonly used in Windows-based applications and devices.
CRL (Certificate Revocation List) is a file format used to specify a list of certificates that have been revoked by a CA. CRLs are typically used in conjunction with certificates to establish trust and ensure security in digital communication.
In summary, when configuring HTTPS proxy on a Cisco WSA, the appliance typically requires a certificate in the PEM format. However, the specific certificate format required may depend on the configuration and use case.